EIP-2026-105306

This PHP script exploits a remote code execution vulnerability in Auto CMS <= 1.8 by injecting a malicious payload into the 'update' parameter, which is then executed via passthru() after base64 decoding. The exploit establishes a pseudo-shell for command execution.